Narrative Dx #003: Healthcare Is Losing the Resilience Narrative
Welcome to Narrative Dx, my new series on Narrative Strategy for Healthcare. I'm performing story surgery on the healthcare industry — with an occasional tangent into life sciences and biotech. Let's dive in.
In March, a hacktivist group calling itself Handala wiped Stryker’s IT systems and shut the company down across 79 countries. Manufacturing stopped for three weeks. Ordering and shipping went with it. Stryker’s first public read on the damage: no material impact expected. A month later, in an amended SEC filing, the company reversed itself. The incident, it now said, had materially affected the quarter. Six employee lawsuits followed.
Medtronic is still notifying people affected by its own cyberattack, months after the fact, using the same three words every device company reaches for when something goes wrong: no evidence of misuse.
Neither of those is a technical failure. Stryker got its plants running again. Medtronic’s forensics are presumably fine. What failed is the public posture. Minimize first, correct later, and hope nobody clocks the gap between the two statements.
Zoom out past medtech and the same shape shows up everywhere in healthcare this year.
The current Ebola outbreak in the Democratic Republic of Congo and Uganda has passed 1,500 confirmed cases. It’s caused by the Bundibugyo strain, and the World Health Organization has recommended against using the existing Ebola vaccine because there isn’t solid evidence it protects against this version of the virus. The tool built for the last outbreak doesn’t fully reach the one actually spreading.
And this one isn’t confined to a single incident report. Hospital operating margins hit a twelve month low in January 2026, dropping to negative 0.6% as drug costs jumped nearly 14% and supply costs climbed double digits, according to Strata Decision Technology’s benchmarking data. Finance leaders surveyed by HFMA named Medicaid funding cuts their top concern by a wide margin, ahead of labor costs or payer negotiations. None of that is a single crisis to explain away. It’s a structural shift that transformation and finance teams have been narrating around, quarter after quarter, as if the next efficiency initiative will make the old model work again.
Four different domains. Same tell. Reassurance, delivered late, built to make the disruption look smaller than it was, or in the margin case, a steady story that never quite catches up to how structural the pressure has become.
If you’re the one accountable for transformation inside your organization, this list isn’t background reading. Every one of these is a version of a question you’re already sitting with: does your crisis plan cover the disruption you haven’t modeled yet, or only the one you already ran a tabletop exercise for? Does your board hear the real number when you know it, or the smoothed version while the real one gets finalized? That gap, between what the org knows and what it’s willing to say out loud, is the thing transformation is actually supposed to close.
Call this what it actually is. Healthcare doesn’t have a risk management problem. It has a narrative problem, and specifically a decision making posture problem, not a messaging fix. The infrastructure mostly works. Stryker rebuilt its plants. DRC is running trials on countermeasures it doesn’t have full data on yet. What’s missing is the public story that goes with the work, and the industry’s default instinct is to say as little as possible and hope the disruption stays contained enough that it never becomes the headline. That approach only holds up when disruption stays inside a box somebody already modeled. This year, none of it did.
Compare that to how finance talks about risk now. After 2008, the entire posture of the sector changed. Stress tests. Capital buffers. Scenario planning built around the assumption that the next shock is a matter of when, not if. Nobody in banking pretends tail risk won’t happen again. The sector’s public language now assumes the next disruption and says, credibly, that it’s positioned for it.
Healthcare hasn’t made that turn. It still talks as if each disruption is a one off, something to explain away, instead of a category of event that will keep happening and has to be built around. Expecting the unexpected isn’t a pessimistic stance. It’s the stance an industry adopts once pretending otherwise stops being credible. Finance got there. Healthcare hasn’t said it out loud yet.
Being resilient in healthcare today isn’t a claim you make after the fact. It isn’t “no impact,” “fully restored,” or a forecast held steady while the real numbers say something else. It’s a story nobody in the industry has fully written yet, one that assumes disruption is the baseline rather than the exception, and treats finding a way through as the expectation rather than the surprise.
The organizations that get there first won’t be the ones with the fastest incident response. They’ll be the ones willing to say, before the next disruption lands, that they expect it, and that they’re built to move through it in public. Not just in the server room.
I'm Ari Mostov. I help healthcare and medtech leaders write the resilience story before the next disruption forces their hand. More soon in this series, Narrative Dx.